fix sign and cookies in POST